Four Critical Vulnerabilities Expose HPE Aruba Devices to RCE Attacks

HPE Aruba Networking (formerly Aruba Networks) has released security updates to address critical flaws impacting ArubaOS that could result in remote code execution (RCE) on affected systems.
Of the 10 security defects, four are rated critical in severity -

CVE-2024-26304 (CVSS score: 9.8) - Unauthenticated Buffer Overflow Vulnerability in the L2/L3 Management Service Accessed via

address aruba aruba networks arubaos attacks buffer buffer overflow buffer overflow vulnerability code code execution critical critical vulnerabilities cve cve-2024 cvss cvss score devices expose flaws hpe hpe aruba networking networks overflow rce rce attacks remote code remote code execution result score security security updates severity systems unauthenticated updates vulnerabilities vulnerability